AI StaffingAI Labor LawAI AdmissionsAI DSD & HRBlogLaunch Workspace
Back to the Blog
Labor law10 min read

California Skilled Nursing Bloodborne Pathogens Compliance: Exposure Control Plan, Sharps Injury Log, Hepatitis B Vaccine, Post-Exposure Response, and Recordkeeping

Last updated:

A California SNF bloodborne-pathogens workflow for operators: who is covered, what the Exposure Control Plan must include, when hepatitis B vaccine must be offered, how sharps incidents are logged, and which records must be retained.

Direct answer

California skilled nursing facilities with employees who have occupational exposure to blood or other potentially infectious materials must follow 8 CCR 5193: keep a written Exposure Control Plan, use required engineering and work-practice controls, offer hepatitis B vaccination, provide post-exposure follow-up, and maintain specific logs and records.

Key takeaways

  • For a California SNF, the trigger is occupational exposure, not whether the facility has already had a needlestick or splash incident.
  • The Exposure Control Plan must be written, implemented, maintained, reviewed at least annually, and tied to actual job classifications and tasks.
  • Exposure determination is made without subtracting risk because PPE is available or usually worn.
  • Employees with occupational exposure must be offered hepatitis B vaccination at no cost after training and within 10 working days of initial assignment, unless a stated exception applies.
  • Contaminated sharps events can create two documentation duties: the Sharps Injury Log under 8 CCR 5193 and a Cal/OSHA Form 300 privacy-case entry under 8 CCR 14300.8.

Last updated: October 20, 2026.

For a California skilled nursing facility, bloodborne-pathogens compliance is an employee-exposure workflow, not just an infection-control policy sitting in a binder. The controlling rule is 8 CCR 5193, with record-access and retention rules in 8 CCR 3204 and separate contaminated-sharps recording duties in 8 CCR 14300.8. In practice, the Director of Nursing, staff educator, infection prevention lead, HR, employee health, and any manager handling incidents need the same answer on the same day: who is covered, what controls are required, and what proof has to exist when Cal/OSHA asks for it.

This page stays on the employee-side California workplace-safety answer for SNFs. It does not try to restate resident-care infection-control requirements. If you are mapping related workflows, pair this page with California Aerosol Transmissible Disease Compliance for Skilled Nursing, California Workers’ Compensation Injury Response for Skilled Nursing, and California Skilled Nursing Personnel-File, Payroll-Record, Signed-Document, and Employee Medical-Record Requests.

Which California skilled nursing facilities have to follow the bloodborne-pathogens rule?

If your California SNF has even one employee whose duties create occupational exposure to blood or other potentially infectious materials, section 5193 applies. Cal/OSHA's Bloodborne Frequently Asked Questions page expressly places skilled and long-term nursing care facilities in the covered healthcare category, so operators should not wait for a prior needlestick, splash, or survey citation before building the program. The practical issue is usually not whether the facility is covered. It is whether the facility has correctly mapped every covered job classification, task, and procedure into a current written workflow.

What counts as occupational exposure in a SNF?

The trigger is reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or other potentially infectious materials that results from job duties. In a skilled nursing facility, that can clearly include direct-care nursing roles, but it can also reach housekeeping, laundry, or other support roles when assigned tasks create foreseeable exposure. The key operator point is that exposure determination must be made without regard to PPE. A facility cannot remove a job class from the analysis simply because gloves, gowns, or face protection are usually available.

What has to be in the written Exposure Control Plan?

The Exposure Control Plan is the backbone of the program. Section 5193 requires an employer with occupational exposure to establish, implement, and maintain an effective written plan. In a workable SNF version, that means more than a generic policy template. The plan should identify covered job classifications, list the tasks and procedures with exposure risk, describe engineering and work-practice controls, explain PPE expectations, set out post-exposure steps, and connect those steps to training, vaccination, logging, and retention. If the written plan says one thing and medication carts, treatment rooms, or dirty utility workflows show another, that mismatch becomes the real compliance problem.

California SNF bloodborne-pathogens workflow by operator task

Workflow areaWhat the SNF must controlCore proof to keep
Exposure determinationList job classifications and tasks with occupational exposure, without subtracting risk because PPE is usedWritten Exposure Control Plan with department-specific exposure determination
Engineering and work-practice controlsUse required sharps controls and safe handling practices; limit recapping and similar sharps handlingProduct evaluations, employee-input documentation, policy language, training records
Hepatitis B vaccinationOffer at no cost after training and within 10 working days of initial assignment for exposed employees unless an exception appliesOffer documentation, vaccination record, or signed Appendix A declination
Post-exposure responseProvide immediate confidential medical evaluation and follow-up after a reported exposure incidentIncident report, referral, source-individual steps where applicable, written-opinion delivery tracking
Sharps and injury logsEnter qualifying sharps incidents on the Sharps Injury Log and record contaminated sharps injuries on Form 300 as privacy casesSharps Injury Log, Form 300 entry, internal investigation notes
Record retention and accessKeep medical, training, and sharps records for the required periods and respond to access requests on timeRetention schedule, secure files, employee-access request log

How often does the Exposure Control Plan need to be reviewed?

At least annually, and again whenever tasks, procedures, or controls change in a way that affects occupational exposure. Section 5193 also requires the employer to solicit input from nonmanagerial employees responsible for direct patient care when identifying, evaluating, and selecting effective engineering and work-practice controls. For a SNF, annual review should not be a checkbox handled only in administration. The update should reflect real floor practice, product changes, new sharps devices, changed medication or treatment workflows, and documented frontline input that can be produced later if an investigator asks how the facility chose its controls.

What sharps controls matter most for SNF operators?

Section 5193 puts engineering and work-practice controls first. For specified procedures, needleless systems or sharps with engineered sharps injury protection must be used unless a stated exception applies. The rule also says contaminated sharps generally may not be bent, recapped, or removed from devices, except in limited situations where no alternative is feasible or a specific procedure requires it and a one-hand or mechanical method is used. In skilled nursing, the problem is often not a missing written rule. It is drift between approved device policy and what staff actually do on a rushed med pass, treatment round, or blood draw.

When does a SNF have to offer hepatitis B vaccination?

For employees with occupational exposure, the employer must make hepatitis B vaccination available at no cost after the required training and within 10 working days of initial assignment, unless the employee has already completed the series, antibody testing shows immunity, or vaccination is medically contraindicated. Prescreening cannot be required before offering the vaccine. If the employee declines, the declination must be documented using the Appendix A statement built into section 5193. For operators, that makes onboarding control critical: the offer, the employee's decision, and any follow-up have to be visible, dated, and stored in the right record stream.

Are there vaccine exceptions operators should know about?

Yes, but they are narrower than many facilities assume. The research dossier supports a limited collateral-duty first-aid exception, not a broad exception for ordinary SNF clinical roles. That means operators should not treat a first-aid carve-out as permission to delay or skip vaccine offers for nursing staff or other routinely exposed employees. If the facility believes an exception applies to a specific role, the safer approach is to test that role against the exact rule language and document why the exception fits, rather than relying on custom or verbal practice.

What has to happen after a needlestick, splash, or other exposure incident?

The response clock starts immediately after a reported exposure incident. The SNF must make available a confidential medical evaluation and follow-up that includes documentation of the route of exposure and the circumstances, source-individual identification and testing steps when feasible and legally allowed, employee blood collection and testing, post-exposure prophylaxis when medically indicated, and counseling. The employee must also receive the healthcare professional's written opinion within 15 days after completion of the evaluation. This is where the bloodborne-pathogens workflow intersects with California Workers’ Compensation Injury Response for Skilled Nursing: one event can trigger both processes, but one process does not replace the other.

Do training and orientation have to be paid?

Yes. For employees with occupational exposure, bloodborne-pathogen training must be provided at no cost and during working hours, at the time of initial assignment, and at least annually thereafter. Additional training is required when a change in tasks or procedures affects occupational exposure. Section 5193 also requires training that fits the employee's language and literacy level and includes an interactive question-and-answer opportunity. For skilled nursing operators, the weak point is often assuming one generic annual module covers everyone equally even when new devices, changed procedures, or language-access issues make that assumption false.

What is the difference between the Sharps Injury Log and the Cal/OSHA Form 300?

They are separate records, and one does not satisfy the other. Under section 5193, each exposure incident involving a sharp must be recorded on the Sharps Injury Log within 14 working days. Separately, section 14300.8 requires all work-related contaminated needlestick and sharps injuries to be recorded on the Cal/OSHA Form 300 as privacy cases. The common operator mistake is assuming that because employee health, risk management, or a supervisor documented the incident somewhere, both duties were met. A sound workflow checks incident intake, Sharps Injury Log entry, and Form 300 entry as distinct tasks with distinct owners.

How long do bloodborne-pathogen records have to be kept?

The retention clocks are not all the same. Medical records for exposed employees must be kept confidential and retained for at least the duration of employment plus 30 years. Training records must be kept for 3 years. Sharps Injury Logs must be maintained for 5 years. Access timing matters too: under section 3204, when an employee or representative requests access to qualifying records, access is due no later than 15 days. If your team already struggles to retrieve personnel, payroll, or signed records quickly, compare this problem with the workflow in California Skilled Nursing Personnel-File, Payroll-Record, Signed-Document, and Employee Medical-Record Requests.

What documents will matter most if Cal/OSHA inspects a SNF?

The research dossier points to a practical proof set: the Exposure Control Plan, Sharps Injury Log, Log 300, vaccination offers and declinations, training records, and post-exposure follow-up files. Cal/OSHA enforcement policy also shows that investigators use those materials to test whether engineering controls were actually evaluated, whether direct-care employee input was documented, and whether the written plan matches real conditions. The operational lesson is simple: if the evidence lives in separate silos with no owner and no reconciliation step, the facility does not have a reliable compliance workflow even if each department believes it handled its own piece.

What does a workable bloodborne-pathogens workflow look like in a SNF?

The cleanest workflow has one owner for annual plan review, one intake path for exposure incidents, and a dated checklist for every exposed employee from assignment through annual review. ePeople is designed to help operators surface open items such as a missing vaccine decision, an overdue annual review, or a sharps event recorded in one place but not another. That is useful operationally, but it does not change the legal standard. The SNF still needs a current plan, trained employees, timely post-exposure action, and records that can be produced quickly when a supervisor, regional leader, or Cal/OSHA investigator asks for proof.

  • Map every job classification and task with reasonably anticipated blood or OPIM exposure, without subtracting risk because PPE is available.
  • Review the Exposure Control Plan at least annually and document nonmanagerial direct-care employee input on sharps controls.
  • Make hepatitis B vaccine offers visible in onboarding for each exposed employee, including declinations on the required Appendix A statement.
  • Separate incident response from recordkeeping so Sharps Injury Log and Form 300 checks are both completed.
  • Set retention and access rules by record type rather than relying on one generic HR file policy.
  • Use one shared audit view across nursing, staff development, employee health, and HR so incomplete steps do not stay hidden.

Frequently asked questions

Does every California SNF need a bloodborne-pathogens Exposure Control Plan?

A California skilled nursing facility needs a written Exposure Control Plan if it has any employee with occupational exposure to blood or other potentially infectious materials. The trigger is the employee's duties, not whether the facility has already had a sharps or splash incident.

Can a SNF exclude a job role from coverage because staff wear gloves and other PPE?

No. Under section 5193, exposure determination is made without regard to personal protective equipment. If assigned job duties create reasonably anticipated exposure, the role belongs in the facility's evaluation even when gloves, gowns, masks, or face shields are routinely used.

Is the Sharps Injury Log the same thing as the Cal/OSHA Form 300 entry?

No. A qualifying sharps exposure event can require a Sharps Injury Log entry under 8 CCR 5193 and a separate contaminated-sharps entry on the Cal/OSHA Form 300 under 8 CCR 14300.8. Skilled nursing operators should treat those as separate recordkeeping checks.

How fast does a SNF have to act after an exposure incident is reported?

The confidential medical evaluation and follow-up must be made available immediately after a reported exposure incident. That response includes documenting the exposure route and circumstances, taking source-individual steps where applicable, arranging employee testing steps, and completing the follow-up required by section 5193.

Sources

ePeople.ai logo

Turn bloodborne-pathogen steps into a real operator workflow

ePeople AI helps skilled nursing operators track labor-law and workplace-safety steps across departments so missed vaccine offers, missing logs, and late follow-up do not stay buried in binders, inboxes, or disconnected spreadsheets.

15-minute focused walkthrough · We respect your privacy — your information is never shared